Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/m9PBdX5JmYFofHGvSUU5UmKnaWs.roa
File:                     m9PBdX5JmYFofHGvSUU5UmKnaWs.roa (raw, json)
Hash identifier:          can50Gs/EiLt8jqcuqmNGF0UD8/zsVuibeog9475+Lg=
Subject key identifier:   9B:D3:C1:75:7E:49:99:81:68:7C:71:AF:49:45:39:52:62:A7:69:6B
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       66
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/m9PBdX5JmYFofHGvSUU5UmKnaWs.roa
Signing time:             Sun 01 Mar 2026 01:32:21 +0000
ROA not before:           Sun 01 Mar 2026 01:32:21 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     59127
IP address blocks:        2401:7ec0:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: Mar  1 01:32:21 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=9BD3C1757E499981687C71AF4945395262A7696B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:60:96:9e:9c:d2:10:4b:84:92:44:0d:af:f0:
                    7f:f4:96:72:3e:88:cb:77:84:90:6c:b8:25:66:80:
                    61:da:30:65:83:16:ab:02:19:78:2e:4f:a8:9e:2f:
                    1a:ba:39:c3:c2:7e:c6:bc:5d:39:b0:8d:06:4d:a1:
                    c8:7a:bf:f3:4a:91:ee:8b:e0:fd:11:1a:c9:ad:0a:
                    90:2f:63:28:92:26:3f:58:79:86:47:06:a8:70:b3:
                    e4:0f:3e:a7:de:5c:7b:f9:02:89:a0:f4:10:ad:74:
                    41:7f:90:27:c2:da:16:76:c0:75:5b:de:9c:4e:84:
                    30:7c:81:1f:7b:27:6b:c8:78:60:24:a4:b6:6e:70:
                    40:4e:f3:57:e7:c9:28:6d:af:85:3e:80:27:53:29:
                    9f:a1:53:06:32:75:99:61:8b:ba:3a:a9:4b:ae:01:
                    99:e4:7b:c7:98:79:bf:81:ec:10:06:ec:7d:8b:1f:
                    41:d6:4d:91:09:a2:ea:68:1f:71:01:2d:32:5a:c1:
                    8c:eb:ad:3a:90:dd:dc:62:8f:f7:52:4f:45:38:1e:
                    cd:01:ce:f5:c7:96:7d:54:b8:1b:6a:06:44:24:ce:
                    f8:d2:0f:a8:c3:1b:8c:67:da:5b:1a:ab:02:87:72:
                    b5:f0:bc:54:0c:e5:f0:fa:20:b9:cb:ad:9d:3a:51:
                    74:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D3:C1:75:7E:49:99:81:68:7C:71:AF:49:45:39:52:62:A7:69:6B
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/m9PBdX5JmYFofHGvSUU5UmKnaWs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         53:f7:ac:c2:5b:4d:92:71:8b:d2:f5:90:36:61:e3:1d:7f:f3:
         65:26:cf:8e:c5:73:43:ca:c2:bb:79:51:5a:6f:15:6f:6a:7d:
         20:ba:33:4a:38:c0:3a:1f:83:b3:21:e0:01:1d:19:56:c4:1c:
         96:c6:6b:fd:dd:52:50:37:97:bc:cb:5b:b1:77:00:fa:e0:de:
         0e:2d:8d:2f:0c:79:d9:bd:d9:43:88:88:84:18:54:fd:e5:e4:
         34:22:76:ac:9d:67:4a:1b:af:f3:e3:a6:5b:cd:6f:05:af:6f:
         3a:f1:2e:c5:08:06:5a:f6:e1:2c:cd:85:36:78:75:23:66:ff:
         fd:ae:be:86:fa:42:45:54:72:f3:d2:39:3d:d8:4a:44:c2:42:
         2a:50:a3:97:14:bf:c1:f1:d4:ab:d0:5a:99:36:e3:6d:90:e0:
         10:d7:12:3d:91:7b:9c:7e:11:16:b3:73:c0:47:76:59:79:d3:
         3f:8c:43:da:cb:ac:ad:f4:c3:c5:61:71:c6:0a:2a:96:f6:1d:
         b6:0a:3e:42:4f:e9:c8:9a:d4:00:f9:0f:2e:c2:72:3f:1e:15:
         a5:69:9e:0c:c7:67:ae:eb:f3:cd:32:fb:e4:46:b2:3a:ad:9e:
         0f:6f:0e:de:08:10:28:66:1d:b9:ba:77:b9:2d:45:e8:60:9e:
         b1:3a:93:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:04:17 2026 by rpki-client